Threat modelling for ASP.NET: Designing secure applications

IFIP Advances in Information and Communication Technology

Volumn 175, Issue , 2005, Pages 145-158

  Grimm, Rüdiger ^a   Eichstädt, Henrik ^a  

^a ILMENAU UNIVERSITY OF TECHNOLOGY   (Germany)

Author keywords

ASP.NET; Client server; Data storage; Security; Threat countermeasures; Threats; Web application; Web services

Indexed keywords

SECURITY SYSTEMS; WEB SERVICES;

ASP.NET; CLIENT SERVER; DATA STORAGE; SECURITY; THREATS; WEB APPLICATION;

WEBSITES;

EID: 84902463137     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: None     Document Type: Conference Paper

References (7)

1. J. Butler, T. Caudill-ASP. NET Database Programming-Weekend Crash Course (John Wiley & Sons Inc, 2002)
2. L. Desmet, B. Jacobs, F. Piessens, and W. Joosen. A generic architecture for web applications to support threat analysis of infrastructural components, Eighth IFIP TC-6 TC-11 Conference on Communications and Multimedia Security (CMS 2004), September 2004, UK, ppl55-160
3. MSDN Library-Improving web application security: Threats and Countermeasures http://msdn.microsoft.com/library/default.asp7urWlibrary/en-us/dnnetsec/html/ThreatCounter.asp, 2003
4. Information Technology Security Evaluation Criteria (ITSEC):/ Provisional Harmonised Criteria. Luxembourg: Office for Official Publications of the European Communities, 1991. Bundesanzeiger Verlagεges., Köln 1992
5. The Common Criteria for Information Technology Security Evaluation (CC) version 2.1, Sep 2000. Part 1-Intro & General Model; Part 2-Functional Requirements; Part 3-Assurance Requirements. Standardised as ISO/IEC 15408 1999 (E), available from http://csrc.nist.gov/cc/
6. Don Box-Migrating Native Code to the NET CLR http://msdn.microsoft.com/library/default.asp7urH/msdnmag/issues/01/05/com/toc.asp, 2001
7. L. Desmet, B. Jacobs, F. Piessens, and W. Joosen. Threat modelling for web services based web applications. Eighth IFIP TC-6 TC-11 Conference on Communications and Multimedia Security (CMS 2004), September 2004, UK. pp 161-174